Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8f925c0-0eb3-3cb1-81ac-a6a4439f8e92.roa
File:                     a8f925c0-0eb3-3cb1-81ac-a6a4439f8e92.roa (raw, json)
Hash identifier:          LG0DyR9+LJglA7DFTJyyR1G1lwPuFuNwkEWfirYKaDw=
Subject key identifier:   74:E2:AF:B3:2E:6C:84:81:67:8B:A7:A9:B3:66:DE:13:65:B8:21:65
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285845533322F1269E66019BFE9600
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8f925c0-0eb3-3cb1-81ac-a6a4439f8e92.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        209.92.60.0/23 maxlen: 23

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:22:f1:26:9e:66:01:9b:fe:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=32e55ea0-924d-4b25-84a8-6586f64094f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:5d:01:ef:1a:10:67:5e:a7:f3:77:51:83:
                    30:cf:bb:47:76:79:a2:38:2a:67:de:92:76:d4:27:
                    20:ad:51:f8:49:c3:18:17:e3:3e:fa:fc:cd:74:0c:
                    b4:8d:e6:e0:fc:2f:2b:48:da:8e:22:c5:2f:71:a3:
                    9b:28:09:5c:44:6a:5f:7e:94:11:0b:87:26:c4:0b:
                    92:1a:94:1d:ec:04:8f:fd:cd:19:53:5f:0d:a8:5a:
                    06:1e:7e:42:55:dc:66:46:90:e4:06:c5:95:f6:05:
                    30:9b:8f:25:32:5c:2c:08:d8:b8:c5:8a:98:e2:81:
                    c8:46:f5:ee:7d:72:a7:69:ec:bd:5a:9d:e1:c4:d5:
                    d2:0b:37:96:4d:7d:67:23:e7:18:43:e5:88:f4:f4:
                    d6:07:f7:03:70:13:ba:dd:d7:6f:fa:f2:50:9b:19:
                    65:6d:26:ac:dc:0b:48:68:0b:06:b5:48:15:99:4c:
                    a6:44:21:37:c7:4d:a1:7b:91:f3:71:ac:a1:8e:4a:
                    85:ac:0a:7b:24:6d:77:bc:a9:af:b5:a8:b8:92:64:
                    a3:74:84:3e:ba:bf:27:4d:24:84:03:83:92:cb:12:
                    35:c9:96:3d:cd:f6:a9:c8:4f:5a:c1:34:1c:97:67:
                    e7:12:fa:79:eb:70:4d:e0:e4:77:83:1f:46:9c:ea:
                    f4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E2:AF:B3:2E:6C:84:81:67:8B:A7:A9:B3:66:DE:13:65:B8:21:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8f925c0-0eb3-3cb1-81ac-a6a4439f8e92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ce:db:3f:d6:89:c5:f1:e0:2d:76:21:ea:d5:bc:39:7a:c7:
         99:7b:7d:df:2e:40:93:a9:4b:61:05:0e:e7:24:4c:a1:34:de:
         e0:75:cd:f0:4b:96:fc:8a:1e:01:59:7b:11:37:2c:02:e3:30:
         08:9a:20:76:e5:ed:ee:99:b4:e4:46:ae:20:45:42:d7:03:7f:
         c5:2c:80:bf:e4:7b:cb:a1:77:66:dd:37:07:11:9d:1f:b8:77:
         6e:8c:30:f5:d2:bf:a6:d7:c5:8c:3a:48:5b:02:70:7f:8e:be:
         de:e9:19:a0:54:3f:f6:d3:04:07:3e:7c:f8:1e:5d:a1:d4:22:
         63:cd:52:bb:c4:05:27:ad:b4:05:34:72:d5:63:6a:8c:6e:4d:
         13:7d:02:ca:e0:74:57:f9:e0:41:fe:f9:15:0e:ea:ae:89:98:
         47:96:9f:32:83:e1:c9:e9:16:8f:85:13:83:40:02:ae:57:a8:
         4c:aa:a1:66:96:c0:e8:d5:e4:29:1a:a9:22:1e:70:13:44:b3:
         9d:88:bb:1a:f1:45:05:85:36:9a:f8:13:15:9a:e4:18:29:fc:
         75:2a:5d:bc:09:f8:0d:f3:1a:5d:25:5e:6b:d9:d0:41:81:c2:
         44:d0:04:77:d0:ab:f8:82:e4:10:5d:8f:8c:65:82:0f:92:18:
         63:ba:c4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----